Branch: refs/heads/maint-5.34
  Home:   https://github.com/Perl/perl5
  Commit: 63f36a9334f30cb27d641731521f07564eaa391d
      
https://github.com/Perl/perl5/commit/63f36a9334f30cb27d641731521f07564eaa391d
  Author: Ricardo Signes <rjbs@semiotic.systems>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M cpan/Encode/Encode.pm

  Log Message:
  -----------
  Encode.pm: apply a local patch for CVE-2021-36770

I expect Encode to see a new release today.

Without this fix, Encode::ConfigLocal can be loaded from a path relative
to the current directory, because the || operator will evaluate @INC in
scalar context, putting an integer as the only value in @INC.

(cherry picked from commit c1a937fef07c061600a0078f4cb53fe9c2136bb9)


  Commit: 932f6a09ff08934d7eb7c230427d4633dd6d6621
      
https://github.com/Perl/perl5/commit/932f6a09ff08934d7eb7c230427d4633dd6d6621
  Author: Hugo van der Sanden <h...@crypt.org>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M locale.c

  Log Message:
  -----------
  gh17824: zero curlocales[]

Static analysis tools such as Coverity and clang report that we can
otherwise end up reading uninitialized data, and inspection agrees.

(cherry picked from commit 8a2e41ffbc376a86586e2b42daa43293299622c5)


  Commit: db48c3db85182b05e557fbbe6491e297665f3bdf
      
https://github.com/Perl/perl5/commit/db48c3db85182b05e557fbbe6491e297665f3bdf
  Author: Hugo van der Sanden <h...@crypt.org>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M regcomp.c

  Log Message:
  -----------
  avoid overflow on delta in study_chunk

delta and pos_delta may hold OPTIMIZE_INFTY to represent infinity.

(cherry picked from commit e096e509321e540009a195ee8530c7dd07c62125)


  Commit: 7a52f426ed718c218479642f3effffd2f7a76035
      
https://github.com/Perl/perl5/commit/7a52f426ed718c218479642f3effffd2f7a76035
  Author: Hugo van der Sanden <h...@crypt.org>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M regcomp.c

  Log Message:
  -----------
  data->pos_delta should stick at infinity

The expression we're about to add to data->pos_delta in this part of
study_chunk() can be both positive or negative; however while we apply
an overflow check to avoid exceeding OPTIMIZE_INFTY, we were happily
subtracting from it when the expression was negative, making it no longer
infinite.

(cherry picked from commit 8227b2b69230eaeea8f88d757b20021608518279)


  Commit: 43cbd598f60a85afcfc3de71e89e8a48330158f5
      
https://github.com/Perl/perl5/commit/43cbd598f60a85afcfc3de71e89e8a48330158f5
  Author: Tony Cook <t...@develop-help.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M sv.c
    M t/lib/warnings/sv

  Log Message:
  -----------
  Don't try to Sv[PI]V() on an undef index SV in find_uninit_var()

When trying to evaluate:

  $x{$y}

or

  $x[$y]

where both the index and the hash or array entry was undefined,
when trying to report the entry as uninitialised, find_uninit_var()
would try to get the string or numeric value of the index,
recursively trying to produce a warning.

This would end up overflowing the stack, producing a segmentation fault.

Fixes #19147.

(cherry picked from commit 23cca2d1f4544cb47f1124d98c308ce1f31f09a6)


  Commit: 656575c0e8a592751ea5bb18ad5760647af7eb4b
      
https://github.com/Perl/perl5/commit/656575c0e8a592751ea5bb18ad5760647af7eb4b
  Author: Yves Orton <demer...@gmail.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M regcomp.c

  Log Message:
  -----------
  Fixup Issue #19350 - Assert error under: use re Debug=>"ALL"

In 7c932d07cab18751bfc7515b4320436273a459e2 karl changed the regex
parser to not do two passes always, and instead do one if it could.
However in some edge cases it still must do a second past and some of
the info needed for the Debug => "All" would not be available during the
first pass.

This was compounded by S_add_data() validly returning a 0 index for data
that was stored in the data array, which meant that there was no way to
tell the difference between "we dont have the data to call S_add_data()
at all" and "we called S_add_data() and it returned 0", this in turn
would cause the dumping logic to try to access data that was not there,
and misinterpret it as a valid SV, with ensure assert fails or worse
segfaults.

This patch changes S_add_data() so it always returns a non-zero return,
so that the regex debug logic can tell that it shouldnt do a lookup into
the data array. This means create a new "what" type of "%", which is
used SOLELY to populate the ->data[0] and ->what[0] with a dummy entry.

With this done we can add guard statements to places that lookup things
in the data array, if the index is 0 it can not be valid.

(cherry picked from commit a963d6d5acabdd8c78afec507b56f890de6d346a)


  Commit: f5d636819508aaa8aca5bf524608482989d72318
      
https://github.com/Perl/perl5/commit/f5d636819508aaa8aca5bf524608482989d72318
  Author: Yves Orton <demer...@gmail.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M t/re/pat_advanced.t

  Log Message:
  -----------
  Test for Issue #19250, assert fail with Debug=>ALL

(cherry picked from commit 33fc73772ea3d0f5c08e3c0702c5df8dcb47ef15)


  Commit: b7a355bb618f078df8e25e2ec1ee225cc3a947ee
      
https://github.com/Perl/perl5/commit/b7a355bb618f078df8e25e2ec1ee225cc3a947ee
  Author: Atsushi SUGAWARA <peanutsjam...@gmail.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M lib/perl5db.pl

  Log Message:
  -----------
  lib/perl5db.pl: cmd_l() no longer exists.

Subroutine cmd_l() no longer exists.
Now we should call cmd_l_main().

(cherry picked from commit fe991866a0206a96b2ae0b9e875b80609ab3b919)


  Commit: 5d3459078b3d598d5062bc0dbcc7f77d0009c18f
      
https://github.com/Perl/perl5/commit/5d3459078b3d598d5062bc0dbcc7f77d0009c18f
  Author: Atsushi SUGAWARA <peanutsjam...@gmail.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M lib/perl5db.pl

  Log Message:
  -----------
  fix comment.

(cherry picked from commit f4918ae72c941f3f53469101d22200cb6dc6903c)


  Commit: 1fb4de909b741f564fb9985015da8903a31cf366
      
https://github.com/Perl/perl5/commit/1fb4de909b741f564fb9985015da8903a31cf366
  Author: Steve Hay <steve.m....@googlemail.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M lib/perl5db.pl

  Log Message:
  -----------
  Bump VERSION for previous two commits


  Commit: a23c14938114a96cca01c5c43d275fecd670f64f
      
https://github.com/Perl/perl5/commit/a23c14938114a96cca01c5c43d275fecd670f64f
  Author: Dan Book <gri...@grinnz.com>
  Date:   2022-02-26 (Sat, 26 Feb 2022)

  Changed paths:
    M pod/perlcommunity.pod

  Log Message:
  -----------
  perlcommunity - freenode chat is moving to libera

(cherry picked from commit 1b4abd7a1176bbccd4448de637474be7e72f8a57)


Compare: https://github.com/Perl/perl5/compare/79a7b254d85a...a23c14938114

Reply via email to